Data processing agreement
Last updated 25 September 2026
Who is who
The food business that opens a kitchen is the controller. You decide why the log exists: the records an inspector expects for a food hygiene rating.
I, Berlik ([email protected], Astana, Kazakhstan), am the processor. I store and show that log only so you can keep the diary and hand over the PDF.
The waitlist on this marketing site is separate. There I am the controller. That is the privacy policy, not this page.
What this covers
Staff names, the email of anyone you invite, temperatures, checklist answers, cleaning and delivery records, corrective notes, photos attached to a reading, and the time each one was saved.
Card numbers are not covered. Payments, when they start, are taken by Paddle, not by me.
What I do with it
I process it to provide the diary you asked for: save a record, show today, export the PDF, and keep the archive. I do not sell it and I do not use it for advertising.
I will not use it for a purpose of my own. If the law forces a disclosure, I will tell you unless the law forbids that.
How long
The archive is kept for 3 years, which is what a food log is expected to cover, and while the subscription is active. When you ask me to delete the account, I delete or anonymise it unless the law says I must keep it.
Subprocessors
Supabase stores the database. Cloudflare hosts the site and the app. PostHog, if configured, counts visits on the marketing site only and does not receive the kitchen log. Paddle, when billing starts, handles payment.
I will email the kitchen before I add a subprocessor who can see the log. You can object by replying to [email protected].
Security and requests
A kitchen can read only its own rows. I will tell you without undue delay if I learn of a breach that affects your log.
If a member of staff asks you for a copy, a correction or a deletion, write to me and I will help you answer. I will not treat them as if I were the controller.
Where
I am in Kazakhstan. The app is hosted on Cloudflare and the database is on Supabase. Creating a kitchen is your instruction to process the log in that setup.
This agreement
It applies from the day you create a kitchen. It sits beside the terms of use. The terms still cover price, refunds and liability. This page covers personal data in the log.